From 0fc43c5e26e541950c3f447deff32d7a00d7ea48 Mon Sep 17 00:00:00 2001 From: Jack Baldry Date: Thu, 2 Feb 2023 06:42:53 +0000 Subject: [PATCH] Use organization ISSUE_COMMANDS_TOKEN with reduced scope (#1248) The new token is set at an organization level so it does not require repository administrators to rotate the token. It also has the minimal classic PAT permissions to facilitate the workflow. It has expiry but that expiry is reported via email to the engineering organization and the IT Helpdesk have permissions to regenerate the token when expiration is imminent. Signed-off-by: Jack Baldry Signed-off-by: Jack Baldry Co-authored-by: Joey Orlando --- .github/workflows/issue_commands.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/issue_commands.yml b/.github/workflows/issue_commands.yml index f2d82f7d..e33a1468 100644 --- a/.github/workflows/issue_commands.yml +++ b/.github/workflows/issue_commands.yml @@ -3,7 +3,7 @@ on: issues: types: [labeled] pull_request: - types: [labeled] + types: [labeled] jobs: main: runs-on: ubuntu-latest @@ -18,6 +18,6 @@ jobs: run: npm install --production --prefix ./actions - name: Run Commands uses: ./actions/commands - with: - token: ${{secrets.GH_ISSUE_COMMANDS}} - configPath: issue_and_pr_commands \ No newline at end of file + with: + token: ${{secrets.ISSUE_COMMANDS_TOKEN}} + configPath: issue_and_pr_commands